CVE-2011-3270

Unspecified vulnerability in Cisco IOS 12.2SB before 12.233SB10 and 15.0S before 15.01S3a on Cisco 10000 series routers allows remote attackers to cause a denial of service device reload via a sequence of crafted ICMP packets, aka Bug ID CSCtk62453...

CVE-2011-0946

CVE-2011-0946 involves a vulnerability in Cisco IOS/NAT where NAT for NetMeeting Directory (LDAP) can be triggered by malformed LDAP traffic, causing a DoS (device reload or hang). Affected are Cisco IOS releases 12.1–12.4 and 15.0–15.1, plus IOS XE 3.1.xSG. The weakness is within the NAT transla...

CVE-2011-3272

The IP Service Level Agreement IP SLA functionality in Cisco IOS 15.1, and IOS XE 2.1.x through 3.3.x, allows remote attackers to cause a denial of service memory corruption and device reload via malformed IP SLA packets, aka Bug ID CSCtk67073...

CVE-2011-0945

Memory leak in the Data-link switching aka DLSw feature in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xS before 3.1.3S and 3.2.xS before 3.2.1S, when implemented over Fast Sequence Transport FST, allows remote attackers to cause a denial of service memory consumption and...

CVE-2011-3277

CVE-2011-3277 affects Cisco IOS NAT implementation (12.1–12.4, 15.0–15.1) and IOS-XE 3.1.xSG. The issue arises from NAT handling of H.323 traffic on TCP/1720, enabling remote attackers to cause a DoS (device reload). Cisco’s advisory notes multiple NAT DoS vectors (including H.323), with mitigati...

CVE-2011-3276

Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1, and IOS XE 3.1.xSG, allows remote attackers to cause a denial of service device reload or hang by sending crafted SIP packets to TCP port 5060, aka Bug ID CSCso02147...

CVE-2011-3273

CVE-2011-3273 refers to memory leaks in Cisco IOS Software when IPS or Zone-Based Firewall is configured, leading to memory exhaustion or device crash under high session-creation rates or processing specially crafted HTTP packets. The vulnerability affects Cisco IOS IPS/ZBFW configurations (notab...

CVE-2011-2543

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service endpoint reboot or process crash or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug...

CVE-2011-2544

Cross-site scripting XSS vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery CSRF attacks that change...

Buffer overflow

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service endpoint reboot or process crash or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug...

CVE-2011-2543

Buffer overflow in the cuil component in Cisco Telepresence System Integrator C Series 4.x before TC4.2.0 allows remote authenticated users to cause a denial of service endpoint reboot or process crash or possibly execute arbitrary code via a long location parameter to the getxml program, aka Bug...

CVE-2011-2544

Cross-site scripting XSS vulnerability in the web interface in Cisco TelePresence System MXP Series F9.1 and earlier allows remote authenticated users to inject arbitrary web script or HTML via a crafted Call ID, as demonstrated by resultant cross-site request forgery CSRF attacks that change...

Design/Logic Flaw

Cisco Identity Services Engine ISE before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135...

CVE-2011-3290

Cisco Identity Services Engine ISE before 1.0.4.MR2 has default Oracle database credentials, which allows remote attackers to modify settings or perform unspecified other administrative actions via unknown vectors, aka Bug ID CSCts59135...

CVE-2011-3290

Cisco Identity Services Engine (ISE) prior to 1.0.4.MR2 is affected by CVE-2011-3290 due to default Oracle database credentials. The underlying cause is hard-coded/default credentials in the ISE database, enabling a remote attacker to modify configuration and perform administrative actions withou...

Design/Logic Flaw

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service crash via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq465...

CVE-2011-2577

Unspecified vulnerability in Cisco TelePresence C Series Endpoints, E/EX Personal Video units, and MXP Series Codecs, when using software versions before TC 4.0.0 or F9.1, allows remote attackers to cause a denial of service crash via a crafted SIP packet to port 5060 or 5061, aka Bug ID CSCtq465...

CVE-2011-2555

Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182...

Default credentials

Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182...

CVE-2011-2555

Cisco TelePresence Recording Server 1.7.2.x before 1.7.2.1 has a default password for the root administrator account, which makes it easier for remote attackers to modify the configuration via an SSH session, aka Bug ID CSCtr76182...